SQL Server taking variable as Column name -

SQL Server taking variable as Column name -

create procedure spanonymuserdata ( @table nvarchar (64), @id int, @name nvarchar(255) ) set nocount on; declare @sql nvarchar(4000); declare @parameterdefinition nvarchar(4000); select @parameterdefinition = ' @idparameter int, @nameparameter nvarchar(255)'; select @sql = n' insert ' + @table + '([id],[name]) values (' + cast(@id nvarchar(max)) + ',' + cast(@name nvarchar(max)) + ')'; exec sp_executesql @sql, @parameterdefinition, @idparameter = @id, @name=@name;

if give name "name1", server taking "name1" column name.... please help

please seek inserting single quote before , after input data.

create procedure spanonymuserdata ( @table nvarchar (64), @id int, @name nvarchar(255) ) set nocount on; declare @sql nvarchar(4000); declare @parameterdefinition nvarchar(4000); select @parameterdefinition = ' @idparameter int, @nameparameter nvarchar(255)'; select @sql = n' insert ' + @table + ' ( [id], [name] ) values (' + cast(@id nvarchar(max)) + ' , ''' + cast(@shopid nvarchar(max)) + ''' ) '; exec sp_executesql @sql, @parameterdefinition, @idparameter = @id, @name=@name;

sql sql-server